docker exec -it dawarich_app /bin/sh
bin/rails console

http://192.168.1.59:3000/

root@docker:~/dawarich# apt list -a containerd.io
Listing... Done
containerd.io/bookworm,now 2.1.5-1~debian.12~bookworm amd64 [installed]
containerd.io/bookworm 1.7.29-1~debian.12~bookworm amd64
containerd.io/bookworm 1.7.28-2~debian.12~bookworm amd64
containerd.io/bookworm 1.7.28-1~debian.12~bookworm amd64
containerd.io/bookworm 1.7.28-0~debian.12~bookworm amd64
containerd.io/bookworm 1.7.27-1 amd64
containerd.io/bookworm 1.7.26-1 amd64
containerd.io/bookworm 1.7.25-1 amd64
containerd.io/bookworm 1.7.24-1 amd64
containerd.io/bookworm 1.7.23-1 amd64
containerd.io/bookworm 1.7.22-1 amd64
containerd.io/bookworm 1.7.21-1 amd64
containerd.io/bookworm 1.7.20-1 amd64
containerd.io/bookworm 1.7.19-1 amd64
containerd.io/bookworm 1.7.18-1 amd64
containerd.io/bookworm 1.6.33-1 amd64
containerd.io/bookworm 1.6.32-1 amd64
containerd.io/bookworm 1.6.31-1 amd64
containerd.io/bookworm 1.6.28-2 amd64
containerd.io/bookworm 1.6.28-1 amd64
containerd.io/bookworm 1.6.27-1 amd64
containerd.io/bookworm 1.6.26-1 amd64
containerd.io/bookworm 1.6.25-1 amd64
containerd.io/bookworm 1.6.24-1 amd64
containerd.io/bookworm 1.6.22-1 amd64
containerd.io/bookworm 1.6.21-1 amd64
containerd.io/bookworm 1.6.20-1 amd64
containerd.io/bookworm 1.6.19-1 amd64
containerd.io/bookworm 1.6.18-1 amd64
containerd.io/bookworm 1.6.16-1 amd64

root@docker:~/dawarich# apt install containerd.io=1.7.29-1~debian.12~bookworm
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
The following packages will be DOWNGRADED:
  containerd.io
0 upgraded, 0 newly installed, 1 downgraded, 0 to remove and 0 not upgraded.
Need to get 31.9 MB of archives.
After this operation, 41.4 MB of additional disk space will be used.
Do you want to continue? [Y/n] Y
Get:1 https://download.docker.com/linux/debian bookworm/stable amd64 containerd.io amd64 1.7.29-1~debian.12~bookworm [31.9 MB]
Fetched 31.9 MB in 1s (44.1 MB/s)         
dpkg: warning: downgrading containerd.io from 2.1.5-1~debian.12~bookworm to 1.7.29-1~debian.12~bookworm
(Reading database ... 22230 files and directories currently installed.)
Preparing to unpack .../containerd.io_1.7.29-1~debian.12~bookworm_amd64.deb ...
Unpacking containerd.io (1.7.29-1~debian.12~bookworm) over (2.1.5-1~debian.12~bookworm) ...
Setting up containerd.io (1.7.29-1~debian.12~bookworm) ...
Processing triggers for man-db (2.11.2-2) ...
root@docker:~/dawarich# docker compose -f docker/docker-compose.yml up
Attaching to dawarich_app, dawarich_db, dawarich_redis, dawarich_sidekiq
Error response from daemon: failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: open sysctl net.ipv4.ip_unprivileged_port_start file: reopen fd 8: permission denied: unknown
root@docker:~/dawarich# apt install containerd.io=1.7.28-1~debian.12~bookworm
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
The following packages will be DOWNGRADED:
  containerd.io
0 upgraded, 0 newly installed, 1 downgraded, 0 to remove and 0 not upgraded.
Need to get 31.9 MB of archives.
After this operation, 123 kB disk space will be freed.
Do you want to continue? [Y/n] Y
Get:1 https://download.docker.com/linux/debian bookworm/stable amd64 containerd.io amd64 1.7.28-1~debian.12~bookworm [31.9 MB]
Fetched 31.9 MB in 1s (51.3 MB/s)         
dpkg: warning: downgrading containerd.io from 1.7.29-1~debian.12~bookworm to 1.7.28-1~debian.12~bookworm
(Reading database ... 22232 files and directories currently installed.)
Preparing to unpack .../containerd.io_1.7.28-1~debian.12~bookworm_amd64.deb ...
Unpacking containerd.io (1.7.28-1~debian.12~bookworm) over (1.7.29-1~debian.12~bookworm) ...
Setting up containerd.io (1.7.28-1~debian.12~bookworm) ...
Processing triggers for man-db (2.11.2-2) ...
root@docker:~/dawarich# docker compose -f docker/docker-compose.yml up
Attaching to dawarich_app, dawarich_db, dawarich_redis, dawarich_sidekiq
dawarich_redis  | 1:C 11 Nov 2025 20:55:50.860 # WARNING Memory overcommit must be enabled! Without it, a background save or replication may fail under low memory condition. Being disabled, it can also cause failures without low memory condition, see https://github.com/jemalloc/jemalloc/issues/1328. To fix this issue add 'vm.overcommit_memory = 1' to /etc/sysctl.conf and then reboot or run the command 'sysctl vm.overcommit_memory=1' for this to take effect.
dawarich_redis  | 1:C 11 Nov 2025 20:55:50.860 * oO0OoO0OoO0Oo Redis is starting oO0OoO0OoO0Oo
dawarich_redis  | 1:C 11 Nov 2025 20:55:50.860 * Redis version=7.4.7, bits=64, commit=00000000, modified=0, pid=1, just started
dawarich_redis  | 1:C 11 Nov 2025 20:55:50.860 # Warning: no config file specified, using the default config. In order to specify a config file use redis-server /path/to/redis.conf
dawarich_redis  | 1:M 11 Nov 2025 20:55:50.862 * monotonic clock: POSIX clock_gettime
dawarich_redis  | 1:M 11 Nov 2025 20:55:50.865 * Running mode=standalone, port=6379.
dawarich_redis  | 1:M 11 Nov 2025 20:55:50.866 * Server initialized
dawarich_redis  | 1:M 11 Nov 2025 20:55:50.867 * Ready to accept connections tcp
dawarich_db     | The files belonging to this database system will be owned by user "postgres".
dawarich_db     | This user must also own the server process.
dawarich_db     | 
dawarich_db     | The database cluster will be initialized with locale "en_US.utf8".
dawarich_db     | The default database encoding has accordingly been set to "UTF8".
dawarich_db     | The default text search configuration will be set to "english".

apt-cache policy docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin | grep -i installed

Error response from daemon: failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: open sysctl net.ipv4.ip_unprivileged_port_start file: reopen fd 8: permission denied

Installation sur le docker :

root@docker:~/dawarich# docker compose -f docker/docker-compose.yml up
[+] Running 17/20
 ⠦ dawarich_app [⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿] 568.3MB / 569.7MB Pulling                                                                                                                      32.7s 
   ✔ 3db4a2a23f26 Download complete                                                                                                                                                  1.2s 
   ✔ 4f4fb700ef54 Already exists                                                                                                                                                     0.1s 
   ✔ bf04bd217259 Pull complete                                                                                                                                                      8.9s 
   ✔ 21b9826a05f9 Download complete                                                                                                                                                  1.3s 
   ✔ 2a793530ea8e Pull complete                                                                                                                                                     12.0s 
   ✔ 4d634792421f Download complete                                                                                                                                                  4.8s 
   ✔ e7503b425690 Pull complete                                                                                                                                                     12.2s 
   ✔ 148c4616894c Download complete                                                                                                                                                  4.8s 
   ✔ afd20fed8782 Pull complete                                                                                                                                                     30.0s 
   ✔ 18ad3d912648 Download complete                                                                                                                                                  2.2s 
   ⠼ d7e0c66c1f2a Extracting    1 s                                                                                                                                                 31.0s 
   ✔ 409fa4872e61 Download complete                                                                                                                                                  1.1s 
   ✔ a5687a2d9c35 Download complete                                                                                                                                                  1.2s 
   ✔ 1c130081d49e Download complete                                                                                                                                                  1.1s 
   ✔ 898a7804b9c8 Download complete                                                                                                                                                  1.3s 
   ✔ 8c7716127147 Pull complete                                                                                                                                                      8.0s 
   ✔ 500fd5208b9d Download complete                                                                                                                                                  1.1s 
   ✔ ac80cde22bfc Pull complete                                                                                                                                                      8.7s 
 ⠦ dawarich_sidekiq Pulling                                                                                                                                                         32.7s 

   / __ \____  _____/ /_____  _____
  / / / / __ \/ ___/ //_/ _ \/ ___/
 / /_/ / /_/ / /__/ ,< /  __/ /    
/_____/\____/\___/_/|_|\___/_/     
                                   
  ⚙️  Using Default Settings on node balkany
  🆔  Container ID: 114
  🖥️  Operating System: debian (12)
  📦  Container Type: Unprivileged
  💾  Disk Size: 4 GB
  🧠  CPU Cores: 2
  🛠️  RAM Size: 2048 MiB
  🚀  Creating a Docker LXC using the above default settings
  
  ✔️   Storage datastore2 (Free: 799.6GB  Used: 3.0TB) [Template]
  ✔️   Storage datastore2 (Free: 799.6GB  Used: 3.0TB) [Container]
  ✔️   Template debian-12-standard_12.12-1_amd64.tar.zst [local]
  ✔️   LXC Container 114 was successfully created.
  ✔️   Started LXC Container
  ✔️   Network in LXC is reachable (ping)
⠧ Customizing LXC Containerbash: warning: setlocale: LC_ALL: cannot change locale (en_US.UTF-8)
⠸ Customizing LXC Containerbash: warning: setlocale: LC_ALL: cannot change locale (en_US.UTF-8)
  ✔️   Customized LXC Container
  ✔️   Set up Container OS
  ✔️   Network Connected: 192.168.1.59 2a01:cb1d:b05:4b00:be24:11ff:fef0:b92e 
  ✔️   IPv4 Internet Connected
  ✔️   IPv6 Internet Connected
  ✔️   Git DNS: github.com:(✔️ ) raw.githubusercontent.com:(✔️ ) api.github.com:(✔️ ) git.community-scripts.org:(✔️ )
  ✔️   Updated Container OS
  ✔️   Installed Docker docker-v29.0.0
      Install Docker Compose v2 plugin? <y/N> y
  ✔️   Installed Docker Compose v2.40.3
      Would you like to add Portainer (UI)? <y/N> 
      Would you like to install the Portainer Agent (for remote management)? <y/N> 
      Expose Docker TCP socket (insecure) ? [n = No, l = Local only (127.0.0.1), a = All interfaces (0.0.0.0)] <n/l/a>: 
  ✔️   Customized Container
  ✔️   Cleaned
  ✔️   Completed Successfully!

  🚀  Docker setup has been successfully initialized!

Superbe doc : https://www.linuxtricks.fr/wiki/debian-mettre-a-niveau-de-bookworm-12-vers-trixie-13